using System.Web;
using System.IO;            foreach ( HttpPostedFile aFile in Request.Files )
        {
                if ( aFile.ContentLength > 0 )
                {
                        string[] aSplit = aFile.FileName.Split( '\\' );
                        string aFullPath = Server.MapPath( @"TempDir\"   aSplit[aSplit.Length-1] );
                        aFile.SaveAs( aFullPath );                            DBCommand1.CommandText = 
                                " insert into TABLE                 "  
                                "           ( FileName,             "  
                                "             FileContent )         "  
                                "    values ( @F1,                  "   
                                "             @F2         )         ";
                        DBCommand1.Parameters.Add( "@F1", SqlDbType.VarChar );
                        DBCommand1.Parameters.Add( "@F2", SqlDbType.Image );
                        DBCommand1.Parameters["@F1"].Value = aFullPath;                            FileStream aStream = new FileStream(  aFullPath, FileMode.OpenOrCreate, FileAccess.Read );                                        
                        using ( BinaryReader aReader = new BinaryReader( aStream ) )
                        {
                                DBCommand1.Parameters["@F2"].Value = aReader.ReadBytes( (int)aReader.BaseStream.Length );
                                aReader.Close();
                        }                            DBCommand1.Connection.Open();
                        try
                        {
                                DBCommand1.ExecuteNonQuery();
                        }
                        catch ( Exception Ex )
                        {
                                lbMessage.Value  = 
                                        string.Format( "上傳檔案失敗, 檔案名稱: {0} 
 原因:{1}", 
                                        aFile.FileName, Ex.Message );
                        }
                        finally
                        {
                                DBCommand1.Connection.Close();
                        }                            File.Delete( aFullPath );                    }
        }    

引言: 請問這應該是用 C# 寫的？ 還有這樣是不是將上傳的圖片先存再 Server 的某一個目錄 再寫到資料庫內？ 在安全性上是否比較有問 Eric Lin

    System.IO.Stream aFileStream = Request.Files[1].InputStream;